문의자

How to reference a Custom Collection level security group in Process template groups and permissions

질문

I have a custom Collection level group called: "[DefaultCollection]Project Collection Testers" for the QA team. How can I reference that group in the "Groups and Permissions\GroupsandPermissions.xml" process template file? There is no Collection
level group referenced in that xml file. I have seen in another process template file: "WorkItem Tracking\workitems.xml", that a reference to a Collection level Admin group is: "[SERVER]\$$PROJECTCOLLECTIONADMINGROUP$$",
but it doesn't seem to work in GroupsandPermissions.xml, nor does it work for a Customized security group at the Collection level.

Reason for the request: I want to modify the process template so that whenever a new Team Project is created, the "Project Collection Testers" group gets permission to "Modify Work Items in this node" under TeamProject "Areas" security permissions.

Thank you very much for your response. However, isn't "TFSSecurity /gc" for creating a group? I'm not trying to create a group; the group already exists. I'm trying to define permissions for the group in the process template so that
when a new Team Project is created, the create team project wizard will automatically assign the permissions to the group I want. It just so happens that the group is a Collection group instead of a Team Project group.

For example, suppose I have a Team Project = "FredProject", in the GroupsandPermissions.xml file of the process template, you can set:

<groupname="Contributors"description="...">

<permissions>

...

<permissionname="WORK_ITEM_READ"class="CSS_NODE"allow="true"
/>

<permissionname="WORK_ITEM_WRITE"class="CSS_NODE"allow="true"
/>

...

</permissions>

</group>

This will essentially give "edit work items in this node" rights to the team project group called: "[FredProject]\Contributors"

Are you saying that we can not do the same for "[DefaultCollection]\Project
Collection Testers", something like:

<groupname="[Global]\Project
Collection Testers"description="...">

...

</group>

?

If
it is possible, I'm looking for the syntax to reference the Collection group inside the name="<whatgoeshere>" I guess I'm confused because you can set permissions for Collection groups in queries, work item type definitions, etc., so I figure it
should be possible in "GroupsandPermissions.xml" as well.

I didn't find this functionality to be very useful. We can use a Collection level group and set permissions for them on queries and work item type definitions used in the Process template, but you can't set permissions for them in the process template
Groups and Permissions, which performs setup on both queries and type definitions for new Team Projects?

I found a work around for this. I can create a Team Project level group, assign it the security I need in the process template. Then, I can go back (after Team Project is created) and assign a Collection level group to the Team Project level
group. Extra work to get the same result, but it does work.

Since we are given the flexibility to modify access in Groups and Permissions for the process template and define security access to some groups, we should be able to define access for all groups at all levels, not just team project groups. With
the current method, I have to use the work around for every team project instead of setting it once in the process template and forgetting it.